PT-2010-1585 · Hitachi+1 · Cosminexus+6

Publicado 2010-04-21 · Atualizado 2010-06-07 · CVE-2009-4776

Positive Technologies (AI Summary)

CVSS v2.0

9.3

Alta

Vetor base

AV:N/AC:M/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions Hitachi Cosminexus versions V4 through V8 Processing Kit for XML (affected versions not specified) Developer's Kit for Java (affected versions not specified) uCosminexus (affected versions not specified) Electronic Form Workflow (affected versions not specified) Groupmax (affected versions not specified) IBM XL C/C++ Enterprise Edition versions 7 and 8

Description The issue is related to a buffer overflow in certain Hitachi and IBM products. It allows remote attackers to have an unknown impact via vectors related to the use of GIF image processing APIs by a Java application.

Recommendations For Hitachi Cosminexus versions V4 through V8, update to a version that addresses this issue. For Processing Kit for XML, Developer's Kit for Java, uCosminexus, Electronic Form Workflow, Groupmax, and IBM XL C/C++ Enterprise Edition versions 7 and 8, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Buffer Overflow

Enumeração de Fraquezas

CWE-119

Identificadores relacionados

CVE-2009-4776

Produtos afetados

Developer'S Kit For Java

Electronic Form Workflow

Groupmax

Hitachi Cosminexus

Ibm Xl C/C++ Enterprise Edition

Processing Kit For Xml

Cosminexus

Referências · 6

• http://vupen.com/english/advisories/2009/2574 · Aviso do Fabricante
• http://securityfocus.com/bid/36309 · Nota
• http://osvdb.org/57834 · Nota
• http://secunia.com/advisories/36622 · Aviso do Fabricante
• http://hitachi.co.jp/Prod/comp/soft1/global/security/info/vuls/HS09-014/index.html · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2009-4776 · Nota de Segurança